bb8b Privacy Policy — Your Data, Your Rights, Our Responsibilities

This Privacy Policy ("Policy") describes how bb8b ("we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "your") who access or use the bb8b platform, website, and related services. This Policy forms part of our Terms and Conditions and should be read alongside them.

By registering an account, making a deposit, or otherwise using bb8b, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, please do not use the Platform. For questions or to exercise your data rights, contact us at [email protected].

1. Information We Collect

bb8b collects personal information that is necessary to operate a safe, compliant, and functional online gaming platform. We collect information in two principal ways: directly from you when you provide it, and automatically when you use the Platform.

Information You Provide Directly

• Registration data — including your mobile phone number, chosen username, and date of birth. This information is mandatory for account creation and is used to verify your identity and eligibility to use the Platform.
• KYC verification documents — where required, we may request a copy of your national identity card (NID) or other government-issued identification document to verify your identity in accordance with our anti-money laundering obligations.
• Payment information — the mobile financial service account number (e.g. bKash, Nagad, Rocket, Upay) or bank account details you use to deposit and withdraw funds. We store only the information necessary to process transactions and verify ownership; we do not store full card numbers or mobile PIN codes.
• Support communications — any messages, queries, complaints, or feedback you submit to our support team via email or the Platform's contact channels. These records help us resolve disputes and improve our service quality.

Information Collected Automatically

• Device and technical data — including your device type, operating system, browser type and version, screen resolution, and mobile network carrier. This data is used to optimise the Platform's performance on your specific device and to diagnose technical issues.
• Usage data — including pages visited, games played, time spent on each session, betting history, and in-platform navigation paths. We use this data to personalise your experience, identify popular content, and improve the Platform's game library and layout.
• Cookies and similar tracking technologies — see Section 6 of this Policy for a full description of how bb8b uses cookies and your options for managing them.

2. How We Use Your Information

bb8b uses the personal information we collect for the following purposes. In each case, our use is limited to what is necessary, proportionate, and consistent with the reason the information was originally collected:

• Account creation and management — to register your account, verify your identity, manage your login credentials, and process any changes you request to your account settings.
• Transaction processing — to handle deposits and withdrawals via your chosen payment method, to apply bonuses where applicable, and to maintain accurate financial records for each player account.
• Legal and regulatory compliance — to fulfil our obligations under applicable anti-money laundering (AML) rules, Know Your Customer (KYC) requirements, and any other regulatory obligations that apply to the operation of an online gaming platform.
• Responsible gaming — to monitor player activity for signs of problem gambling, to apply player-requested restrictions such as deposit limits or self-exclusion, and to ensure the Platform is not accessed by individuals under the age of 21.
• Customer support — to respond to your queries, resolve disputes, investigate complaints, and improve the overall quality of our support service based on the interactions we handle.
• Platform improvement and analytics — to analyse usage patterns across the Platform, identify bugs and performance issues, test new features, and make data-informed decisions about the Platform's development roadmap.

3. Legal Basis for Processing Your Data

bb8b processes your personal data on the following legal bases, depending on the specific purpose for which the data is being processed:

• Contractual necessity — processing your registration data, payment data, and transaction records is necessary for us to fulfil our contract with you as a registered player on the Platform.
• Legal obligation — processing KYC data, transaction logs, and certain account records is required for us to comply with applicable anti-money laundering laws and other regulatory frameworks that govern online gaming platforms.
• Legitimate interests — processing usage and analytics data, improving platform performance, and detecting fraud or prohibited activity serves bb8b's legitimate business interests and those of our players, provided such processing does not override your fundamental privacy rights.
• Consent — where you have provided explicit consent for a specific processing activity (for example, receiving promotional communications), we will process your data for that purpose only and you may withdraw your consent at any time by contacting [email protected].

4. Sharing Your Information

bb8b does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We share your personal data only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Game and technology providers — we share limited technical and account identifiers with our licensed game studio partners (including Pragmatic Play, Evolution Gaming, Ezugi, and others) to facilitate game delivery, manage RTP records, and resolve game-related disputes. These providers are contractually bound to use your data only for the agreed purpose.
• Payment service providers — we share the payment-related account identifiers necessary to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels. We share only what is required to complete the transaction.
• Legal and regulatory authorities — we will disclose personal data to law enforcement agencies, regulators, or other government bodies when required by law, court order, or other legally binding demand. bb8b will comply with all lawful requests and will notify affected players where legally permitted to do so.
• Fraud prevention and security partners — we may share data with fraud detection and cybersecurity service providers to identify and prevent fraudulent account activity, bonus abuse, and money laundering. These partners process data solely as data processors acting under our instructions.

5. Payment Data and Financial Security

All payment transactions on bb8b are processed via established, trusted mobile financial service providers and bank transfer channels. bb8b does not store your full mobile banking PIN, bank account passwords, or card CVV numbers at any point. Payment data transmitted between your device and our payment partners is protected by SSL/TLS encryption.

bb8b retains transaction records — including deposit amounts, withdrawal amounts, dates, and payment method identifiers — for the period required by applicable financial regulations. These records are used to resolve disputes, comply with audit requirements, and detect financial crime. Access to stored transaction records is restricted to authorised bb8b personnel and is subject to strict internal access controls.

6. Cookies and Tracking Technologies

bb8b uses cookies and similar browser-based tracking technologies to operate the Platform, enhance your experience, and analyse usage patterns. The types of cookies we use include:

• Essential cookies — these are strictly necessary for the Platform to function. They manage your login session, maintain your language preference, and ensure the security of your account connection. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies — these collect anonymised data about how players navigate the Platform, which games are most visited, and how long sessions last. This data helps us improve the Platform's layout, game selection, and overall user experience.
• Preference cookies — these remember your settings and preferences (such as your chosen language) so you do not need to re-enter them on each visit.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect your ability to use some features of the Platform. bb8b does not use third-party advertising cookies or sell browsing data to advertising networks.

7. Data Retention

bb8b retains your personal data for as long as your account remains active and for a defined period after account closure. The specific retention periods are as follows: account registration and identity data is retained for a minimum of five years after account closure to comply with anti-money laundering record-keeping obligations; transaction records are retained for a minimum of five years from the date of the transaction; support communications are retained for two years from the date of the relevant communication.

After the applicable retention period has expired, bb8b will securely delete or anonymise your personal data. Where deletion is not technically possible (for example, where data has been archived in encrypted backup systems), bb8b will isolate the data from further processing until deletion is possible.

8. Your Rights

As a user of the bb8b platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified rights requests within 30 days:

• Right of access — you may request a copy of the personal data bb8b holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right of rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right of erasure — in certain circumstances, you may request that bb8b delete the personal data we hold about you. This right is subject to our legal retention obligations; we cannot delete data that we are required by law to retain.
• Right to restrict processing — you may request that bb8b restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

bb8b will not charge a fee for handling any rights request unless the request is manifestly unfounded or excessive. Where we are unable to fulfil a request, we will explain our reasons and advise you of any available remedies. Identity verification may be required before a rights request can be processed.

9. Security Measures

bb8b takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include: SSL/TLS encryption for all data transmitted between your device and our servers; secure, access-controlled server infrastructure with regular security auditing; strict internal access controls ensuring that personal data is accessible only to bb8b staff who require it for their specific role; and regular security reviews and penetration testing of the Platform's systems.

No method of data transmission or storage is completely secure, and bb8b cannot guarantee the absolute security of your personal data. In the event of a data breach that poses a risk to your rights or interests, bb8b will notify affected players as promptly as practicable and will take immediate remedial action to contain and investigate the breach.

10. Children's Privacy

bb8b is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been provided by an individual who is under 21, we will immediately delete that data and close the associated account. If you are a parent or guardian and you believe that a minor has registered on bb8b, please contact us immediately at [email protected]. We take underage access seriously and have technical controls in place to prevent it, but we rely on accurate information from users to enforce this restriction effectively.

11. Third-Party Links and Services

The bb8b platform may contain references to third-party game providers and payment services. These third parties operate under their own privacy policies, which we do not control. bb8b is not responsible for the privacy practices of third-party game studios, payment processors, or any other external service provider. We encourage you to review the privacy policies of any third-party service you interact with through the Platform.

12. Changes to This Privacy Policy

bb8b reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will update the effective date shown at the top of the page and, where practicable, notify registered players via the Platform. The revised Policy will be effective from the date it is posted.

Your continued use of the Platform after the revised Policy has been posted constitutes your acceptance of the changes. If you do not agree with the updated Policy, you must stop using the Platform and may close your account by contacting [email protected].

13. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bb8b has handled your personal information, please contact our support team. We are available 24 hours a day, 7 days a week.

Contact: [email protected] (plain text only — do not reply to automated system messages). All data rights requests will be acknowledged within 5 business days and resolved within 30 days wherever possible.